How can I stop warning re mysterious trojan or clean my PC of mchinjdrv.sys?
Posted on 2008-10-03
Recently my AVG software has reported on startup that a trojan threat has been detected in c:\windows\system32\drivers\mchinjdrv.sys.
I've done some research and some say that this is a legit thing and others say it is indeed a trojan threat. When the warning appears I can choose to Heal but it can't find the file so can't heal it. I can choose to move it to the Virus Vault but as it can't find it there's nothing to move. If I choose to Ignore it the box goes away but reappears again on startup.
Regedit won't let me chop the Legacy entries out of the registry and a search of the whole PC (including hidden files) can't find this file either. I've run a full AVG virus scan and that comes up clean as do scans with Advanced WIndowsCare, RegCure, XsoftSpy and a scanner I tried from Sophos which claimed to search for hidden rootkits.
I've seen a similar issue reported in EE and it mentions something called Rootkit Unlocker (or something like that) but when I looked in to that there was some doubt about it as someone alleged that this software added something to the system to defend against it ever being removed so in a way that's almost as bad as this current possible security risk.
The only way I can see to rid myself of this dialog is to add an exclusion in AVG not to reference systems32\drivers when it starts up which is convenient but hardly secure.
Can anyone advise on how I can get rid of this thing? Whether it's legit or not, if it poses a threat I'd rather not have it hanging around! I'm running XP inc SP3 and all latest patches and AVG v8.
Thanks in advance.